$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: Ptuharj5+nt2jhB2uO+crNl2zw3wEQBp6fcBZPmDpsg= Subject key identifier: 8A:38:BF:5A:87:81:5F:16:E8:F6:8E:24:4D:73:AD:F6:8B:40:54:A2 Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 2507 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 2507 Signing time: Mon 02 Jun 2025 14:49:02 +0000 Manifest this update: Mon 02 Jun 2025 14:49:02 +0000 Manifest next update: Mon 09 Jun 2025 14:49:02 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: bRZPg3tDPVos7WaY4MjArblu/6wa5IQ134qjo+MpSOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9479 (0x2507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Jun 2 14:49:02 2025 GMT Not After : Jun 9 14:49:02 2025 GMT Subject: CN=683db9de-2fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:39:62:ec:3a:a5:ed:a9:a4:0d:2e:64:7b: 1a:e0:6c:b5:a7:d9:ee:fe:1c:3a:1f:52:fd:3f:79: 88:a6:30:61:95:7b:ff:9f:e0:ac:cb:a5:3e:46:ce: ff:f5:1d:8d:23:bb:91:1a:21:50:44:d5:ae:af:8c: 02:f7:c6:18:13:e9:b5:8b:d7:91:24:ab:19:fe:6a: 95:1c:b8:60:41:69:b3:91:b5:f6:0c:b0:11:f8:7e: c4:2d:60:e7:95:63:06:34:6d:5d:96:55:08:27:1e: d3:94:b8:c6:77:13:4c:57:b3:6c:b1:03:73:6e:2f: a2:ea:21:c5:c4:5c:79:19:2b:fc:15:5b:75:cb:a7: 27:25:c9:06:33:77:a0:ca:02:4e:b7:c5:75:57:0d: 8b:29:ad:e9:1d:5c:cd:3d:6c:87:6f:c0:41:a4:2e: c6:5e:1e:7e:1d:44:c9:e9:e4:04:7c:49:9b:f2:36: cd:c0:1e:65:8c:48:ec:5b:a3:de:e5:94:e5:4b:5b: 81:a9:ed:9e:1c:e6:3e:e4:63:da:33:22:c5:1b:59: 2a:35:af:65:5c:63:47:d5:6a:ef:28:40:67:4e:8c: 14:11:d2:ab:9d:e0:29:af:04:97:05:a6:b7:4f:a2: 02:b4:48:b0:a4:c4:c6:2f:bf:09:c7:a1:40:da:2b: 61:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:38:BF:5A:87:81:5F:16:E8:F6:8E:24:4D:73:AD:F6:8B:40:54:A2 X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:04:7c:65:de:4e:db:ed:c9:41:0b:ee:39:bd:f8:fb:3a:e0: 3d:22:df:fa:9f:d9:33:6f:53:c7:a8:e2:45:43:84:84:49:12: a5:1c:1a:44:a8:e5:46:d8:be:85:53:17:70:fd:cb:63:54:6d: 2a:2d:56:8b:5b:a1:29:35:c3:86:30:7c:b7:16:be:17:47:39: 6f:33:e2:35:59:1f:c1:21:93:7e:85:c7:98:28:59:2f:98:09: 2a:90:36:e7:fb:ad:bb:88:39:ab:b7:f1:88:f3:1b:20:b3:82: a6:7c:34:fa:4f:33:c6:25:3d:eb:13:f4:d9:a1:d4:ce:8e:38: 4f:a6:8e:53:c6:a5:d6:aa:19:40:59:c6:54:4a:4e:6f:05:16: 46:ec:9f:0b:1c:d4:6d:a8:8b:1a:b4:53:91:0a:1c:0a:8b:f5: 04:f3:7a:9f:25:bb:59:c9:d4:d5:d0:6e:2f:6a:75:b9:8f:cd: 2b:e6:48:b5:dd:a7:df:4d:c0:99:e5:e3:8b:5f:b9:a5:9b:e6: 10:63:b3:c8:13:77:1d:52:2e:26:91:c2:2c:3b:83:b5:a3:c6: 9e:18:01:a8:b7:04:4e:6e:35:80:8f:22:89:2c:54:83:2d:0e: 4e:90:26:87:1d:0a:38:9f:9f:da:1b:0a:34:0d:51:4e:e2:61: 18:cc:1d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUwNjAyMTQ0OTAyWhcNMjUwNjA5MTQ0OTAyWjAYMRYwFAYD VQQDEw02ODNkYjlkZS0yZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2Q5Yuw6pe2ppA0uZHsa4Gy1p9nu/hw6H1L9P3mIpjBhlXv/n+Csy6U+Rs7/ 9R2NI7uRGiFQRNWur4wC98YYE+m1i9eRJKsZ/mqVHLhgQWmzkbX2DLAR+H7ELWDn lWMGNG1dllUIJx7TlLjGdxNMV7NssQNzbi+i6iHFxFx5GSv8FVt1y6cnJckGM3eg ygJOt8V1Vw2LKa3pHVzNPWyHb8BBpC7GXh5+HUTJ6eQEfEmb8jbNwB5ljEjsW6Pe 5ZTlS1uBqe2eHOY+5GPaMyLFG1kqNa9lXGNH1WrvKEBnTowUEdKrneAprwSXBaa3 T6ICtEiwpMTGL78Jx6FA2ith0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo4v1qH gV8W6PaOJE1zrfaLQFSiMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbBHxl3k7b7clBC+45vfj7OuA9It/6n9kzb1PHqOJFQ4SESRKlHBpE qOVG2L6FUxdw/ctjVG0qLVaLW6EpNcOGMHy3Fr4XRzlvM+I1WR/BIZN+hceYKFkv mAkqkDbn+627iDmrt/GI8xsgs4KmfDT6TzPGJT3rE/TZodTOjjhPpo5TxqXWqhlA WcZUSk5vBRZG7J8LHNRtqIsatFORChwKi/UE83qfJbtZydTV0G4vanW5j80r5ki1 3affTcCZ5eOLX7mlm+YQY7PIE3cdUi4mkcIsO4O1o8aeGAGotwRObjWAjyKJLFSD LQ5OkCaHHQo4n5/aGwo0DVFO4mEYzB0p -----END CERTIFICATE-----Generated at Wed Jun 4 12:04:39 2025 by rpki-client